Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A0A5450FBA811EEAD840006017001B1.roa
File: 8A0A5450FBA811EEAD840006017001B1.roa (raw, json)
Hash identifier: 1VIm4IxNBGsakCofm5G9HE0Iidtct7R4H6fj+uB6cTY=
Subject key identifier: F3:28:0A:06:70:4A:06:04:02:B2:BE:28:03:C4:48:AC:BD:54:89:63
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AD93
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A0A5450FBA811EEAD840006017001B1.roa
Signing time: Tue 16 Apr 2024 04:19:38 +0000
ROA not before: Tue 16 Apr 2024 04:19:35 +0000
ROA not after: Wed 24 Apr 2024 04:19:35 +0000
asID: 142062
IP address blocks: 154.206.230.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44435 (0xad93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 16 04:19:35 2024 GMT
Not After : Apr 24 04:19:35 2024 GMT
Subject: CN=661dfc5a-754d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:67:69:28:21:c3:8e:d0:f5:8b:5d:a0:59:d4:
c3:f4:21:98:da:50:31:ed:c0:38:dc:d9:38:eb:5f:
46:34:c4:3d:05:2d:8f:65:87:69:f1:c1:21:78:a3:
cd:7e:29:3e:49:47:7f:f6:be:23:f0:42:c9:dd:f6:
55:ad:a9:91:c2:5b:65:d4:a4:ad:32:ec:97:9e:ca:
f2:f4:b4:72:c4:6c:cf:b0:be:ac:61:1e:e4:92:7f:
cb:8e:bb:17:87:d7:8c:68:47:1b:d4:15:a5:94:ff:
de:cf:76:04:5f:0f:3f:b7:40:fe:30:a6:18:c5:f3:
d6:42:a2:a3:93:56:2e:8b:5c:b7:06:d2:cb:1b:50:
ee:fa:9f:2b:38:1d:6e:29:7f:e5:76:ef:88:7c:77:
24:16:b3:69:29:21:31:58:cd:69:3d:9e:17:94:92:
93:c0:68:bb:72:98:f6:6e:10:8d:ba:a0:78:e1:9d:
ac:62:f1:f2:c3:72:82:ee:09:04:82:0a:d1:4a:2e:
9c:b7:33:ca:96:be:53:e4:e7:90:fc:eb:6a:1f:fc:
54:3d:b2:44:c6:26:d3:f0:1a:83:58:a4:82:3c:77:
56:6b:3f:b9:8e:b9:c4:02:1e:6b:e2:30:37:42:e3:
f0:5b:d2:bf:9f:7b:ab:d3:48:11:c8:15:de:cd:82:
86:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:28:0A:06:70:4A:06:04:02:B2:BE:28:03:C4:48:AC:BD:54:89:63
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A0A5450FBA811EEAD840006017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.230.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:2b:53:d9:71:33:d5:e2:8d:12:ac:02:94:c7:22:7f:7d:f8:
65:8e:13:b2:1a:b0:31:42:ca:77:53:2d:2a:e5:9b:1d:e8:52:
92:bf:0c:34:8b:bc:0a:4a:8c:2a:65:25:20:01:24:23:f4:ad:
2d:46:f6:a4:8e:51:7a:06:b1:58:ea:ab:79:f9:e7:98:48:c5:
28:ff:7e:84:ae:48:7b:69:8d:c3:a3:6b:3f:1f:e2:46:f3:0e:
c5:44:9b:20:70:92:0d:dc:36:7e:db:31:39:c6:38:42:c7:a8:
de:28:29:48:ef:da:63:aa:c6:fa:31:7c:65:d5:8c:fe:8c:a7:
27:56:5d:76:bb:50:8d:bb:d9:6d:7c:8b:e4:e3:79:21:fb:76:
29:8b:8b:fd:c9:b3:f7:6d:29:10:8f:c4:dd:3f:e3:c1:94:fe:
62:3f:b9:1e:35:78:27:ce:96:0a:48:61:d2:d1:90:15:e1:5e:
68:42:f7:fd:34:22:33:5c:e7:03:ac:11:a5:2e:16:f4:08:b7:
f1:6c:59:59:03:18:42:ea:82:dc:32:e1:49:38:50:29:5e:d4:
2d:ef:f5:e3:bf:d4:d0:7b:fc:a2:87:da:37:e1:0d:9e:39:2b:
e6:3b:af:1e:8f:f9:f3:5d:5e:a8:3a:9c:69:ce:10:d9:57:7d:
24:87:c7:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 12:34:44 2024 by rpki-client on console-ams.rpki-client.org